I have used master password to protect my login information in Firefox. Whenever I first start Firefox and open a page requiring authentication information Firefox asks my master password before filling authentication information to the login page.
I recently opened a page (through a link from another page) that is not a login page nor should need any login information which was weird. Of course I did not provide my master password.
Now this could be some problem in that web page's scripts but it made me think that if it is possible that some website could create a similar popup window to phish my master password?
And if it is possible how could I distinct a phishing popup form the "official" Firefox one?
Of course if the page is not one of my trusted sites and login page I never provide any authorization information.